Broader Support & Increased Efficiency for Smarter Investigations
MSAB is excited to introduce the latest releases of XRY, XAMN, UNIFY*, XEC, and KTE, enhancing efficiency in mobile device extractions and analysis. XRY’s device manual has been improved for better clarity on capabilities, while XAMN’s popular persons functionality now makes filtering key subjects easier than ever during investigations. Here’s what you can expect from MSAB’s latest major release.
What’s New in XRY?
Extracting and decoding mobile data with XRY 11.0 is faster and more efficient, both at the frontline level and in the lab. Our powerful data recovery software now supports over 51,000 devices, including over 490 apps and more than 4700 app versions. And that’s just the beginning.
Device Manual re-design
XRY 11.0 makes working with the Device Manual even easier! For some devices, all the essential extraction details are now presented in the Capability overview, including whether XRY Pro is required, device state support (AFU, BFU, unlocked, or locked), and the possibility of FFS or physical extraction.
Enhanced Android FFS (Full File System) Unlocked Generic Profile
More devices have been added for FFS extractions, along with enhanced stability improvements. Making this the go to profile when dealing with unlocked Android devices.
Improved Pre-scan
The Pre-scan tab is now the default view in the step-by-step page. It has been improved with better data grouping for easier viewing and significant enhancements for handling iOS devices.
What’s New in XRY Pro?
The latest release of XRY Pro sees wider BFU (Before First Unlock) support for brute forcing and extraction support for popular Exynos devices such as the popular Samsung Galaxy A55. The game-changing Brute Storm continues to be refined, with improved timestamps, enhanced logging, and expanded device compatibility.
What’s New in XAMN?
XAMN 8.1 features substantial enhancements aimed at simplifying your workflow and helping your investigations. Some of the key improvements we brought to our powerful analysis tool include:
Improved Persons
The popular Persons feature within XAMN has now been improved. You can now search not only by name but also by associated metadata, including phone numbers, email addresses, and chat app IDs. Working with Persons is now easier than ever, with improved functionality that speeds up obtaining an overview of all activity linked to an individual.
Review data from more sources
With XAMN Pro 8.1 you can now import the Encase E01 files. Support has also been added for L01 and S01 files. A new profile called Media/docs allows you to import files of any file format, such as pictures and documents.
Open files from Source mode and Hex Viewer
We understand that validation is a must when dealing with digital evidence. XAMN 8.1 now supports opening a file in another view or another tool from source mode or the Hex Viewer. Simply right click the file name to open the context menu to utilize this new functionality.
What’s New in UNIFY 25.3*?
Import users from Active Directory (AD) with LDAP (Lightweight Directory Access Protocol) integration
It is now possible to import users from an external user directory, for example AD or OpenLDAP via LDAP. This reduces manual maintenance and minimizes the risk of information that differs between the two systems
Project VIC support in UNIFY Collaborate
XAMN Pro has supported Project VIC for many years, providing essential functionality for those investigating CSAM. UNIFY Collaborate—XAMN Pro combined with MSAB UNIFY for collaborative investigations—previously did not support working with Project VIC. With the release of UNIF 25.3 and XAMN Pro 8.1, users can now work on Project VIC grading in UNIFY Collaborate.
What’s New in XEC?
XEC Director is your go-to solution for more productive management of your operations, and the latest release takes this productivity to the next level.
Improved system restarts
It is now possible to schedule restarts of Kiosks and Tablets via XEC Director 7.13. The scheduled restarts are executed when no user is logged in and no current uploads are in progress.
Distribute hash lists
Early hash matching alerts users during extraction if a device contains files with hash values matching those on the hash list, allowing further investigation in XAMN. XEC 7.13 now supports distribution of multiple hash lists to your estate.
Disable Cloud token generation
A new setting now allows users to disable cloud token file generation. By default, this feature remains enabled.
What’s New in KTE?
We’re proud to empower frontline personnel with innovative tools that speed up investigations and deliver better results, we work closely with our users to ensure we are their go to solution for meeting the demand of processing large volumes of mobile devices.
Export extracted data from XRY Express
In XRY Express, it is now possible to export extracted files to a selected folder. This makes it easy for XRY Express users to save the selected files to an external drive or USB stick. The possibility to export has previously only been available on Kiosks and Tablets.
Recoverable Workflow data
Sometimes something may go wrong during the extraction process. The Workflow data recovery document can provide valuable detail such as user-added photos and other information. Previously accessible only to the Kiosk administrator, this document can now be made available to users through a new access option.
Open case files in XAMN Express
In XAMN Express, we’ve made it easier for you to review multiple extractions at once, eradicating the need to analyze each extraction separately, saving time and improving your work-flow efficiency.
For more details on the latest release, join us on March 25th for our webinar or access the recording later via these links.
11am AEDT | 11am CET | 11am EST
To view the more detailed release notes, please visit msab.com.
*MSAB Unify 25.3 will be available on March 27th 2025.
